diff options
| author | Christoph Müllner <christoph.muellner@vrull.eu> | 2025-08-01 13:55:33 +0200 |
|---|---|---|
| committer | Christoph Müllner <christophm30@gmail.com> | 2025-08-01 20:40:25 +0200 |
| commit | 5d061c0ee23b1052d796e4e8e421aa6e16166fed (patch) | |
| tree | 0ec5b8dceabfae236de0759c048b2a8fefad047f /linux-headers/include/linux/securebits.h | |
| parent | 686d7e6564509f1b25127df47e2f27a66958d0a0 (diff) | |
| download | riscv-gnu-toolchain-master.zip riscv-gnu-toolchain-master.tar.gz riscv-gnu-toolchain-master.tar.bz2 | |
This patch imports the Linux kernel headers v6.16.
This brings tons of new supported extensions for hwprobe.
Signed-off-by: Christoph Müllner <christoph.muellner@vrull.eu>
Diffstat (limited to 'linux-headers/include/linux/securebits.h')
| -rw-r--r-- | linux-headers/include/linux/securebits.h | 24 |
1 files changed, 23 insertions, 1 deletions
diff --git a/linux-headers/include/linux/securebits.h b/linux-headers/include/linux/securebits.h index 69c11a4..8bad2e1 100644 --- a/linux-headers/include/linux/securebits.h +++ b/linux-headers/include/linux/securebits.h @@ -52,10 +52,32 @@ #define SECBIT_NO_CAP_AMBIENT_RAISE_LOCKED \ (issecure_mask(SECURE_NO_CAP_AMBIENT_RAISE_LOCKED)) +/* See Documentation/userspace-api/check_exec.rst */ +#define SECURE_EXEC_RESTRICT_FILE 8 +#define SECURE_EXEC_RESTRICT_FILE_LOCKED 9 /* make bit-8 immutable */ + +#define SECBIT_EXEC_RESTRICT_FILE (issecure_mask(SECURE_EXEC_RESTRICT_FILE)) +#define SECBIT_EXEC_RESTRICT_FILE_LOCKED \ + (issecure_mask(SECURE_EXEC_RESTRICT_FILE_LOCKED)) + +/* See Documentation/userspace-api/check_exec.rst */ +#define SECURE_EXEC_DENY_INTERACTIVE 10 +#define SECURE_EXEC_DENY_INTERACTIVE_LOCKED 11 /* make bit-10 immutable */ + +#define SECBIT_EXEC_DENY_INTERACTIVE \ + (issecure_mask(SECURE_EXEC_DENY_INTERACTIVE)) +#define SECBIT_EXEC_DENY_INTERACTIVE_LOCKED \ + (issecure_mask(SECURE_EXEC_DENY_INTERACTIVE_LOCKED)) + #define SECURE_ALL_BITS (issecure_mask(SECURE_NOROOT) | \ issecure_mask(SECURE_NO_SETUID_FIXUP) | \ issecure_mask(SECURE_KEEP_CAPS) | \ - issecure_mask(SECURE_NO_CAP_AMBIENT_RAISE)) + issecure_mask(SECURE_NO_CAP_AMBIENT_RAISE) | \ + issecure_mask(SECURE_EXEC_RESTRICT_FILE) | \ + issecure_mask(SECURE_EXEC_DENY_INTERACTIVE)) #define SECURE_ALL_LOCKS (SECURE_ALL_BITS << 1) +#define SECURE_ALL_UNPRIVILEGED (issecure_mask(SECURE_EXEC_RESTRICT_FILE) | \ + issecure_mask(SECURE_EXEC_DENY_INTERACTIVE)) + #endif /* _LINUX_SECUREBITS_H */ |